v0.49.0

0.49.0 (2026-08-06)

⚠ BREAKING CHANGES

• compile: a workflow with no on: key now compiles to a manual / API-queued-only pipeline instead of inheriting ADO's implicit "CI on every branch" default. Codemod 0006_explicit_push_trigger migrates affected sources automatically by pinning the legacy behaviour as an explicit on.push.

Features

• ado-proxy: add credential-isolated Azure DevOps reads (#1824) (c15261b)
• compile: add on.push trigger and make on: the complete run declaration (#1786) (013d897)
• safeoutputs: add GitHub issue outputs (#1670) (18c87dc)
• smoke: replace per-case pipelines with lane-based smoke suite (#1791) (9d0e442)

Bug Fixes

• safeoutputs: stop dropping GitHub issue tool configs in Stage 3 (#1804) (f660667)
• smoke: audit SELF under the rule matching how the orchestrator is triggered (#1799) (0094e40)
• smoke: tag builds via the request body so colon-bearing tags work (#1801) (97b46ec)
• workflows: give reviewers the complete PR diff (#1792) (d19e021)
• workflows: harden reviewer PR-number resolution for /review dispatches (#1781) (53890d6)
• workflows: remove false committed-bundle reviewer guidance (#1795) (6129b92)
• workflows: resolve PR number from aw_context in /review reviewers (#1779) (b8b4a1d)
• workflows: scope reviewer auto-triggers by changed-file subsets (#1787) (08be5ec)